High severity7.5NVD Advisory· Published Sep 6, 2026· Updated Sep 15, 2026
CVE-2026-82208
CVE-2026-82208
Description
With the wolfSSL backend, when CA caching is enabled and an CURLOPT_SSL_CTX_FUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectly accepted.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
3- curl.se/docs/CVE-2026-82208.htmlnvdPatchVendor Advisory
- hackerone.com/reports/3973090nvdExploitMitigationThird Party Advisory
- curl.se/docs/CVE-2026-82208.jsonnvdVendor Advisory
News mentions
1- Patch Tuesday - September 2026Rapid7 Blog · Sep 8, 2026